finished authentication challenge